Skip to content
Threat Feed
Subscribe

Product

Roundcube Webmail (>= 1.7.0, < 1.7.1)

1 brief RSS
low advisory

Roundcube Webmail: Stored XSS and Injection (CVE-2026-48849)

CVE-2026-48849 is a stored XSS, HTML, and CSS injection vulnerability in Roundcube Webmail that enables malicious payload execution upon session restoration.

Roundcube Webmail +1
1r 1t 1c